  598  netstat -an | grep EST | awk '{ print $4 ", "$5}' | grep -v 127.0.0 > /tmp/bar
  599  netstat -an  > /tmp/foo

but the cause of direction.. have to tcpdump!
